update log message with new certkey name
escape session data
add support for multiuser and multi-email-per-user
salt and hash passwords
save users to a file