allow passwords too