enabled a user to set a password