user.php now has accurate info on recent order and password hashing validation works