removed plaintext password, solves #1