[fix] remove password