add password field for Attachment