fix run_scans to add password field from db