case of new username
passord logic broken by UI