almost finished password feature