added a real login function, with salted hash.  Updated schema, changed the username to an email address