move incorrect_password line inside the if to avoid running it if it is not needed