add user
add password as strong, supposed to be some kind of hash
add bcrypt, remove @cart where doesnt need it