added own exceptions, passing password without md5, pushed login into
bll