don't overwrite local password from the one sent from the server