fix password check