UPD: user password stored as plain text