added password spec