implemented secure password match