removed password from xml