some minor refactoring; added bcrypt; added alembic; upgraded psycopg2
added password hashing and validation to Account class