fix check for auth_user password