some fixes, password authentication (dirty hack) and targeted write