use a password prompt