Add password as session variable