changed password to omit '#'