added ajax route for password matches