fixed 'invalid password token error