modify password error handling to set two cases