Security issue of parameter 'password' should be considered

[smallfat]

Currently parameter password is transfered as plaintext string,need to find workaround to avoid security risks.