add password callback && fix settings for password