password fields no longer cleartext