add password verification