module user: check password simple