double check pw when reg