fix for password comparison in login