working password authorization