Fixed some bugs, password_backdoor now properly finds auth calls.