final version. all bugs fixed except password