simple set-password step
data room login permission an optional requirement