fix lack of schema call in xt.check_password