add password fields
refine user edit