bootstrap users with passwords