set password only once at top of file