bug fix : set new password