fixed a small bug that caused the user1 password to be used as their username too