we don't use %{site_password} any more