Don't leak incomplete email count outside password
Modularize password entry
Password restrictions