added password field to users