added auth method to check for correct password