xyz:a bit change for password auth