pass back error message if we have it
restart session on change of password
bump version number