add password verify function