add popin for user with verification of pwd