fixed password authentication