move the db password request to be first. less interaction later