added password warning