* small comment about web_password cvar