Use raw password instead of MD5
Generate random session when user log in
Update login messages