Figured out how bcrypt really works. Wrapped cherrypy's nasty session for unit testing. Implemented the login controller.