moving passwords to subdir