add set_password()