bugfix on the password