added password double check