set cap to use password auth