fix double-escaping possible with encrypted passwords