Completed webapp password authentication. Could try to implement forced password selection on admin promotion, but not vital.