update TODO
wrong password login fail fix… maybe