fix user and pass check