[Bug 645835] obs stores the users password in the session leaking it to the database and sending it via mail