added password documentation