password verification now works with unique hash.

- Also renamed session.json to server.json, it will hold all server
config information