fixed password bug