password cost fix