Password hashing functional. Other things broken.
Routes are now protected per auth right. Really clunky feeling, but functional.