password/nav rewrite