centralize dual password validation
change pages to use centralized javascript