Master password check server side