check for PASSWORD