Drop logout, refactor requestPassword