remove password in unencrypted http form to stop security scan panicking