simple webbased (unsecure) password store