It might be better to leave the password out of the `#to_s` method