get password from user input