add password to db