finished user password stuff