add password authentication