changed 'valid password' to []