Fixed login flow to actually check for pw.