added password to category and products controllers