add secure password and user