removed mail.php (keep from seeing password)