fix password comparison