compares 2 password to make sure they match