moved hashing of passwords to the client side; also made sure login and logout actually redirect; also replaced print with logger