Activity help plz

Hello all! So far, loving this course, but finally got stuck on this activity. After a while, I put together the following code:

        var correctPw = false;
        var guess;
        var password = 'sesame';
        do {
            guess = prompt('What is the secret password?');
            if (guess === password) {
                correctPw = true;
            }
        } while ( ! correctPw );
                            document.write('You are correct!');

It was much uglier than that, and for a bit I wasn't able to move forward as I couldn't get my code to work. I ended up tossing this into jsbin to find my errors. I was able to clean it up, tossed it into the activity, and it said it passed. YAY!!! ...but, here is my issue. After I completed the activity, I decided to run the code in jsbin just to see my work come to life. The prompt appeared, asked for the secret word, and i put some random stuff expecting the box to pop back up asking to try again. Nope, it said my gibberish was the secret code. So, I have two questions...

1. What is wrong with my code for it to say anything is the pw?

2. If my code technically is incorrect, why did it pass the activity? If I didn't double check it, I would have thought I was doing this correctly, and I would have been wrong.

Thank you for any answers friends!