get_roster: Move password to private file.

Yes, it's been changed. Sorry.