#59: make the setPassword and matchPassword API symmetrical