password bug