supports password; various dep bumps