don't pass password through to principal after authentication