added password-based authentication