added password notice, fixing redirect template