Probably some overeager dev or maybe somebody higher up not understanding that you should never see a plain text password if you are doing it right.