new urls, removed password login function