You think the expression (c == "password") means "Is the contents of the char array called c equal the contents of the constant char array "password"?" Well, that is not true. That expression means "Is the address pointed to by the variable c pointing to the same location of the constant string "password"? And the answer will never be No, they don't point to the same location.
To compare strings, use strcmp() or stricmp() or some other variant of those.