clean up passwords