updated password checking