password check for new users works