fixed an issue allowing any passcode for a user.