add password api