function signature changed, now would have failed on wrong password