read password correctly