create principal by password