reuse passwordCallback
decorate window