password stuff added