add password check