userId is a password field