local var "password" was purged