Remove password from $_SESSION. Second reduction of usage of password
The password was set into the session object and also retrieved from it in various scripts. These scripts did not use the password but echoed it sometimes in an URL for a next action (which did not use the password…

