adding a password migration script