add user password and authentication