add check password ajax route