added session helper, bcrypt hashes passwords, full functionality