fixed login password check