bugfix: displayed  password