don't put the real uploadpassword in the error message