user can add save a new password