clear password on login, see #29