Started working on only returning passwords the user has access to