make password grants work