r2154 - don't escape user password