trying to verify, but get 'success' no matter pword entered