Use char[] to handle passwords instead of String

As explain [here](https://stackoverflow.com/questions/8881291/why-is-char-preferred-over-string-for-passwords), it's more secure to avoid using String to carry password because we cannot remove them from memory on demand. So we should use CharArray.