allow setting website password