added password field to user