fix stupid bug:set password on construct method