implemented 'payment' and figured out that it's just password if no second_password is needed