now preserves username between password attempts