finish password action stuff, fix validation stuff, fix other stuff. this should be generally functional and ready for first review