'/join' now works with passwords