password hotfix