Fixing 'me' password leak