password bug fixed