finish chapt 6, user has secure passwords