added missing password link. moved first time user link outside of form