Changed the url for the session to just use the database url. Web-app launches now.
Added a hook to hash the password on save using bcrypt and a method to check a password. Implementation is open to change, since there seem to be a variety of ways to do this.
Updated the package, fixed some typos, added unit tests for hashing and checking. All tests passing.