password authentication added