removed password.xml