Neither [PASSWORD] or [password] works!
I've created a bug ticket to look into why that substitution isn't working. Normally it shouldn't substitute (in Welcome emails), but in the case of a generated password it should substitute just fine. For now you'll have to use [DETAILS].
forge.joomlapolis.com/issues/5435
Another thing in a CB list. If your set Collapse searcgcriteria to YES, then the userlist is first shown when you press the Search button - that is not intuitive, as it says 245 users - But they are not shown.
Once issue per topic please. Create a new topic if you've any other separate issues.