adding password matching