replace passwordHash module with credential, begin add password reset and email verification