checkUserPassword in user schema