CHANGELOG:
* pwd max len set to 30 instead of 50 to prevent hash bypass;
* fixed login.php;