change user login system to use current crypto; can login now, almost there...