fixed password stuff