fix password auth model usage