fix some bugs, now you can test with https://sqrl.apphb.com/