add password hash lib
login, session, and logout