'/join' now accept passwords