removed js password prompt from client