added used password to xml files as comment