add an optional password for users to lock accounts