password auth
minor fix