Add user done
Login done, but does not keep session
Hash and salt to protect user's password