some fixes, now also password is needed to open the vault