js password with redirection