using auth to check password.