adding a flag to the auth controller to handle retrieving the password when requested so that i can short curcuit the process of logging in from a url.