WIP: new password not login-able yet