Disassociate password input so it doesn't get sent + remove session_start