added profile page, fixed logon bypass and hashed passwords