adding password setting on first login and user management