It seems that your demo page (.../demo) is broken (it's 404ing with a NoSuchKey).

Anyway, I'm wondering if your solution helps users who forget their password? (Though I notice your initial comment says something about "get rid of passwords all together.)