accept decline buttons  and password hash