added to web directory, writes to .passwords.txt