webview with non plaintext password storage