password for the ordinary user too