password workaround