fixed issues with change password form when csrf enabled
jade/javascript polishing
css polishing
removed 'remember me' from login (as not implemented)