prefer locally saved passwords