removed unnecessary mongoose instance method
bug fix, modified to type password for password form
added a lot