added test login page, passwords stored in db as hex, added headers to login/registration