change heading in security introduction
move note about password hashing around in consideration section