addit password checking, need testing