Added an assertion about how the password data is received.