security bugfixes, especially in the area of password encryption