adding check for secretpassword in auth check