fixed inital password logic