add require password functionality