both /etc/shadow and /etc/passwd are checked now