I think we should also change all the user's passwords to password?