Add password routes