added sessions / encrypted passwords / database plug / user creation API