User posting is sort of working clientside. not printing password in plain text in server log