some sort of working password. not the nicest but a start