added the password disclaimer