fix with password=false
fix password checking