corrected password control workflow