changed the way the ward_decryptor is handled, no longer passed around, just the encrypted password is passed from the user's cookies as necessary in order to decrypt on the fly. also addressed some issues with restricting access to authorized users.