We don't need to decrypt pw since its now handled in the model