loop for password, say 'access granted'