T004 authentificate user with db storage

> Then i'll should keep logic for generating hash another place
Sure. Better place for this generation is a User service, because you break a SOLID principle