store password in a separate file