removed use of password in lookup