storing user sessions, working on password hash