add password spec