add username and password field to users