note about how passwords are NOT stored in the browser or the domain of the site