added secured password handling