version bump
use password field to store token (for db encryption)
remove password field from migrations
version bump
version bump