update bugs; fix password validation