fixing invalid password bug