password checking fixed