password done (small bug with add)...