fix password statistics

Fixes #127