Fix vulnerability in code where password is