Fix password check in the API show method