fix password bug