added password auth feature