Should warn that the password is stored as plaintext in the DB.