fixed improper password store