validate passwords via SWORD #3385