added password verification stuff