change passwords to read from external list. fixes #211