Add urldecode() to password receiving end