remove reference to password