Remove session based authentication code
Fixed password hash leak, and removed unused code