Fix: user info not sent back to password page on fail