update Changelog, fix typo PASSWORD