updated WebsiteService to not load pages requiring authentication (white
list of pages allowed unauthenticated), updated html and javascript
(added reset password link etc)