use PAM for auth
clear screen between auth attempts