fix(PassportManager): typo and security fix