ensure REST API errors get reflected to UI + fixes + cleanup
new pages (different from activation process) for password reset