password bugfix