More random salt using openssl_random_pseudo_bytes()  instead of mt_rand()
Login updates session table and returns session hash
Describing db.php without username/password
Logging in screen for iPad