PasswordList deserialization
and PasswordListHandler is now a singleton