Changes to request the password instead of passing it as a param