bug fix: don't save the db password in the template, only local settings
feature: password for clone
feature: check validity of password before starting ops