fixed bug with expired password