password comparison is slow. see how PassCommand is handled in the client goroutine.