using 'read -s password' to get password from user