fix bug with duress key if not passed but password is