Update: I looked for the plain text password in code and removed sending it.