fixed password creation