Make sure to change the messages when invalid creds
Gonna send password cleartext over https instead of client hash
Added scrypt and sjcl
More ambiguous message for username not available