add password to config