fixed password stuff, implemented hash

frank, look at hash function in server.js
might not work on server