Add param "password" to url