not going to be passwords for web sites in a couple of years. figure out a way to to persist sessions sans password or even user name