allow specification of password