use HTML::Entities;
encode_entities($password);
# fill in $password into the template