bugfix for password initialization