auth password with user added