password bug fix