Store pwd as hash + store salt
pwd authenticator fct
Account contr & Session model to store user/token
Token implementation
-reload, invalidate, login/logout controll
use of rails feature:  has_secure_password in User class
- Store token in session
- use flash for some notification on login_page