move password check into method. do proper check for password change. remove all password log/error outputs. ever.