added password hashing and login captcha after 3 failed attempts