Client now only sends cryptic password to server