added passwords controller