defer modification of password