verify user raises condition when password is incorrect so returning a
boolean is irrelevant and misleading