moved password handling to startup sequence