addHeads, password handling. need testing, never built it by this moment