added password authentication, session authentication
tweaked file paths, renamed db tables, still can't get it to work