ask for password if it wasn't given