fix password compare bug