move private key password entry for renewal to step 1 of RequestWizard; set renewal flag in first page as well