password length of scope should be 64, not 40