- add password field to user table