added password field, editing route (nonfunctional atm)