refinement to login and forgotten pwd