added passwords to user
authenticated user