change passwords to variables