remove popState to actually send us back to re-enter the second password