work on login pages

work left:
-doesn't listen to enter key (vs click)
-doesn't hash passwords
-no success modal