replace 'user' with 'pw'