fix user password stuff