correct password prompt logic