persistent session for password