build_response can be used more conviniently 
adds some comments
account passwords are now salted with a 128 bit uuid