hashing and salting, admins can login and session data is stored