it is verified that `user_map["password"]` in if above, so it would be nice to use it directly