change:save password locally after auth success.
change:add cursor.close()