my users keep needing to enter a password