Session var storing password didn't change until I told it to