remove plain password