- @password.to_s (CGI.escape needs a string)