fixed password protection