fix up all the password management code, and start on profile images.