On: Pandora doesn't hash their passwords

[cbsmith]

I haven't seen where it pulls the password from, but in theory it could pull it local session cookie.