use a variable for the password