fixed pw protection bug