initial db schema
use php pass hashing, set visibility restrictions