fixed bad password handling