fix hardcoded password with variable common_password