refactor password checking so easier to update, send notifications to everyone including sender