password format bug fix