fixed password check for creating new password