fixed bad password redirection