add password controller