Adapt to User model attribute hash -> password rename
Properly serialize user to session and provide route to get user