modified authorisation password request string to make it clear there will be no serious consequences to getting it wrong