fixed bug concerning password authentication. did this by simplifying the protocol