added plain text password warning