made password security better by not saving it in the session