user can have a password
user can have a password