add password directive