`password` needs single quotes