check password & security fixes