updates, use salted passwords, fix session regneration to not regen all
the time
update