fix a password bug