Dude, the show itself proves it by demonstrating Sherlock's logic as correct to allow him to deduce the password. If he'd been wrong and the dilated pupils were just a sign lying, "[I AM] SHER[LOCKED]" would not have been correct. It was; the writers were fully backing that she was attracted to him.

Everyone knows what it was for her, the show made it blatantly clear.