remove password from put method, unsafe
little refactoring