get rid of old password model, it really should be namespaced