password saving is enabled on client side