change session hash to user password_hash for md5 generation
add session helper