added password authentication