working on log and sign, plus password retrieval