add WebAppSec,hot to safely store a pasword