fixes related to passwords