[FIX] remove password storing in localstorage