updated passwords.js to support the new naming scheme