update TODO
update doc for password setting