upgraded preferences page - now using AJAX, password fields not shown by default