Fix extra semi-colons in forms.  Add try/catch around decryption.  More diagnostics
for pasword change.  Decode token before attempting to decrypt it.