Make session cookie more secure
Switch to a properly hashed passwords