fix password file permissions