started to add actual password building logic