password auth fix