Fixing route to retrieve password