forgot to hash password before checking
better error handling/responses
simple logout