omiting user passwords and fixing user appending

damn javascript scopes and shit