clean password var