making sure we use secure password