solutions
dont ask for password confirmation at login
prevent encrypt password from returning the hashed password
Added test for unique password hash and salts