use built-in user module with prompt for password