working on password form