password checking corrected