added hash to password
More work on php sessions