add password check before password change