adding user-Auth and passwd protection using PBKDF2