password stored as plaintext

[lucasgonze]

I don't know what the good practices are in node.js (RoR is clear enough) but we do the wrongest thing possible.