add encryption to account creation
add encrypted authentication
add authorization token and store in db