added password hashing and other session security measures