fixed password handling for rooms