giving the user a password