made note about not re-using secure password