show error message if wrong password was entered.
implement custom clientstore add new Password page if password is set force entering password to successfully receive the token add a new unsafe api call for init call only
