adds password attributes and validations