updated readme
ensure user exisits before checking password