add username and password for user