ws: Don't hand around passwords unnecessarily

If we're not going to use them, it's just silly to have them all
over in memory.

Closes #135.

Signed-off-by: Marius Vollmer <mvollmer@redhat.com>