creating password attribute