put password check to config file