fix password setting bug