fix password verification