small bug in providing password