Hash Password

login now checks password against a hash. By no means secure, but better
than plaintext?