add password field to user form