new version of the password directive