The two passwords (pop) and (session) should be distinctly identified in the server dialogue, to prevent confusion. It confuses the sysops and the clients.