added requirements for push password api