Passwords controller fixes