previously the user will set up a password that will only work with the author