added global ajax error handler to redirect to login page on authenication timeout
updated help text for password format