much better node-api
compare password works