clarified bug notification for passwords