password made optional on user and database add