Todo: (security improvement) supply user password to this method.