add comment noting danger of logging of password