correct references to passwordlib package