adding password auth, not done yet