add password as a parameter