admin plugin: add password verify