fix(spawn): set new tutorial & world spawn points
feat(security): add password hashing