Password must be deleted from the session.