implement password checking
* i must have thought somewhere along in the process, it actually checked the password, but it didn't
* check_pass in sql, and login will now check the password before returning a value