when create new user fixed

1.user table deleted isvip, added hash, ip
2.user model added new method
3.session, cookie fixed