remove js
change input to password
using global session
shorten refresh time