* wait for user to complete email verification on first run * add password strength meter. fix auth bugs in first run.