* commit 'c78c71b1717613a5be921bbb8ac63c007d4af86a': DO NOT MERGE Check password is correct by checking hash