implemented session file (no password)
implemented hashed password (administrator)
added ip control to session cookie