use checkmark image for matched passwords