list works without login
server loops wrong password
fancy password loop for client