fix the bug that we always authenticate successfully,either user give a correct or incorrect password