simple, uniform password-checking interface
