use password cache