remove logic to reenter the password on error
add password_hash to protect password input in advance
multiple rounds of sync/merge