added field password to user table