passwordless: minor improvements