fixed password setting bugs