add password verification;