Storing password in the session