fix whitespace
add privileges
remove password handling
hide login fields when not on login url

this does not ask for local password in case of timeout
instead the user is redirected to login page for SSO login