user --> getPassword