updates for password based authentication