password field added to authz