modified password section to be clearer