Use exit instead of return here, otherwise script's return code is always 0 and user with wrong password is authenticated