password check fixed