fix expired passwords bug; change more array() to []