added password flag instead of asking for it