form binding, raw sql working. need to actually add users and hash passwords