Password is visible on the database

[thejoefriel]

Potentially to make even more secure you could encrypt these

[thejoefriel]

I've seen new users are added in as hashed passwords so that's fine. Maybe just change the original ones in there for consistency