updated warden password strategy for api logins