add passwap (security)