bugfixes and passwordcheck

added passwordcheck in DataFacade
changed json body from "" to null in accept/refuse and