fixed user password initialization