implement password control