cleaning up password