fixes for dev_password bypass via post