settled on password scheme