dont use flatfile for password