more better authentication by storing it in the db and hashing