add password to user