added user password authentication