1) When changing the username, the password is not cleared from the old account.
2) The password is a regular text field not a password field. But it is masked with stars. Which means I can copy-paste a saved password into a text editor and get the full text.
3) (2) leads me to believe that you store the passwords unencrypted on the file system. Please tell me its encrypted even a bit (thought I would hope its more than just a bit).
