working through users+password

Signed-off-by: Chris Jones <chris@jonezy.org>