requesting password for each action