made password optional