use supplied password from user