fix demo, introduce password