UPDATE: cleanup passwords