finishing the password machinery