Fixed password matching check