password variable was named wrong