Look at what you do if the password evaluates correctly. Look at what you do if it doesn't. Are you doing something if it doesn't that you shouldn't be doing? (The answer is yes. See if you can figure out what that is.)
Look at what you do if the password evaluates correctly. Look at what you do if it doesn't. Are you doing something if it doesn't that you shouldn't be doing? (The answer is yes. See if you can figure out what that is.)