fixed password storing