fix bug it setting users passwords