add password on setting page