hopefully made it clearer that passwords aren't stored