added flag for old password method