added password field in case user did not set it