verify only check two passwords