password barrier and db