add password to user table