add random-string and sha1
encode salt and password
add username as unique value
add login functionality
show error messages when the username or the password is invalid