require user password on insert