add csrf, bcrypt password hashing and helpers, admin base, login and secure routing