Added Hash to password in 'beforeSave()' in user model

Signed-off-by: Haoran <fanghaoran9054@gmail.com>
Added user login layer

Signed-off-by: Haoran <fanghaoran9054@gmail.com>