added password check on login