add password auth & auth helpers