controller code purified; password encryption feature tested, benchmakred and added to poj