Never send passwords in the clear