implement better system for 'passwords'