add login unauthorized error
do not return password hash of user on register or login