Added login routes and forms
added password hash to users