changed url to text and added flash notice for adding a password