add secret password to user_profile