set password and del login status