added assetrion that password is not stored where it should not be stored