don't send password w/ player data