updated user form to include password field