made password private, added session for log in/log out sign up button