Fix async
Deal with URI components in URL
Change password check to post