securing user's password
add scaffold sessions
simple authorization