Don't eval user's password, use a file instead