changed error message, password digest to just password