fixed interaction of refresh and the password vault