no need to encrypt password again, since it is already encrypted by xtc_create_password() - reported by elainy
