removed password from cookies