added "change password"
passwords are now stored via bcrypt
less log output