not verifying the password problem during login