remove password reference