fixed mass assign password issue