change password at first, no login yet
mostly working auth, need to fix code style