switch to db-get-password instead of db-get-user