fix password acceptance