add password field to getuser