user can logout; fixed seedfile; and removed password_hash; session destroys at logout