fixed password mismatch bug