check against encrypted password on login