added secret to user management, stronger hashes of passwords