go ahead and use persistent connections

password changing via key emailed to registered email address.