add question/TODO comment
add TODO regarding hashed password for query in login view