fixed password input and ajax call url