You should definitely be running the SecurityAssist wizard first, then after the pages are created you can edit them with CSS Form Builder and Universal Email.
The idea is that on the login page you will modify the existing form. Once you have done this you should edit the Authenticate user server behavior to ensure that the bindings for the username and password are set correctly to the form fields.
As for the email password you should be able to add in a new Universal Email server behavior to this page. What are the errors you are getting when you try to do either of these?