WinRt: move set password page

- Just like with android, the set password page was originally accessed from the login page, this enabled the user to go straight to that page without logging in. If the user hasn't logged in before, this would cause the set password page to try to use a nonexistent token. This way, the user is forced to log in first, which eliminates the posibility of a nonexistent token.