prompt user for password, don't save in config file