Converted user passwords to tokens, added a repo for it, improved speed by throwing an exception the moment an incorrect hash is detected instead of possibly checking it again down the line