working on password match