Made password check a server side call