fix checkPassword()
bump