added add user, works but super basic, pass not hashed