refactor JS-SHA code.
extend JS password change, but not complete, yet.
Display client nonce on login page.