added password requirement for creating media