added setting of password to null upon login