I don't think we should store the plain password like this :/