adding password to User