Passwords shouldn't be echoed back to the user.