check if the provided password is really the current log-in password