fixed password check