added password-protection for user accounts