fix up passwords controller