make password required