removed remember pwd
changed test case
fixed a bug and return userId when retaking