user has password