better PW protection in headers
Merge pull request #43 from jdoconnor/i-love-rabbits

better PW protection in headers