added password auth