fix bug, no sanitize password !!!