T004 authentificate user with db storage

Please use `private` access modifier for all properties/method as default.

And I think `_id` naming convention is rudiment from `php 4` where there were not access modifiers, I think let's use just `$id`