fixed the password
fixed the auth logic