giving users dummy passwords