add password verify