add password for User