cache the last distances so that time to end is immediately available
make the password change dialog a little more verbose
implement the new token-only authentication