remove hardcoded passwords in show-contacts plugin