Do not hash the password if one isn't sent
Reuse unauthorized() function when wrong credentials are entered
Delete visible alerts when invoking a new request