finished user password work