Don't send passwords in the clear