Allowing for password authentication

Yeah, it's better to use keys, but leaving it up to the user